Privacy

Data privacy statement

The protection of your personal data is important to us. With this data privacy statement, we aim to explain to you in more detail what personal data we collect when you use Peerpep.com or the app Peerpep and for what purpose the data is used.

Contact information and responsible party

Responsible for the processing of your personal data is:
Peerpep B.V.
Galvanistraat 5
1098 NL Amsterdam

If you have any questions or suggestions regarding data protection, please feel free to email us or contact our privacy protection officer at [email protected].

2. Subject matter of data protection

The subject of data protection is personal data, i.e. all information relating to an identified or identifiable natural person.

Automated data collection

When accessing our website or app, your device automatically transmits data for technical reasons. The following data is stored separately from other data that you may transmit to us:

  • URL of the page accessed
  • The latency of the network connection
  • Date and time

We save this data for the following purposes:

  • Load balancing, i.e. to distribute the access to our website across several devices and to be able to offer you the fastest possible loading times.
  • Ensuring the security of our IT systems, for example, to prevent specific attacks on our systems and to identify attack patterns.
  • Ensuring the proper operation of our IT systems, for example if errors occur that we can only remedy by storing the IP address.
  • To enable criminal prosecution, security or legal prosecution if there are specific indications of criminal offenses.

Your IP address is only saved for a period of 14 days.
In this case, the processing takes place on the basis of our predominant legitimate interests mentioned above (Art. 6 Para. 1 lit.f GDPR).

Registration data

To be able to use all functions of Peerpep, you have to register. For this you have to provide the following mandatory information:

  • Email address
  • Username
  • Password

Alternatively, you can log in with your Facebook, Google or Apple account. In this case, we receive the following personal data from Facebook or Apple in order to create a user account for you:

  • Name
  • Email address
  • Photo (Facebook only)
  • An authentication token

If you log in via Facebook, your Facebook friends who also use Peerpep can find you via the search function when this is what you want and have, as such, enabled the correct settings on Facebook. Your registration data is required to set up and manage a user account for you and so that you can use all the features of our website. In this case, you conclude a (free) usage contract with us on the basis of which we collect this data (Art. 6 Para. 1 b GDPR). In order to conclude the contract, you have to provide us with this data. However, you are neither contractually nor legally obliged to conclude the contract and thus to provide the data.

In addition, you can provide further voluntary information as part of the registration, for example you can save a profile photo, tell others about yourself or indicate your favorite sport. This information is voluntary and not necessary to register you. Please note, however, that this information may be visible to other Peerpep users according to your settings. You can determine whether you want to be found by other users. We collect this data in order to be able to provide you with the corresponding functions of our website, Art. 6 Para. 1 lit. b GDPR.

When you log in to Peerpep, we also save your IP address for a short period of time in order to be able to detect and prevent possible attacks and mass misuse of logins to Peerpep (e.g. so-called brute force attacks) by accessing these IP Block addresses temporarily if necessary. The processing takes place in order to ensure the security of the processing according to Art. 32 GDPR and based on our legitimate interest in protecting us from misuse of our service (Art. 6 Para. 1 lit.f GDPR). The storage takes place only as long as it is necessary for these purposes.

5. Community functions

At Peerpep, you can interact with other users, for example by publishing personal Highlights, commenting. You can also friend other users if you want to keep up to date with new posts from them.

The use of these functions is of course voluntary. If you use it, we collect the data you have entered in order to make it accessible to other Peerpep users in accordance with your settings and the function you use.
If you wish, we will also inform you by email or push notification if there is any news about your published contributions. You can set which notifications you receive yourself in your settings.

Your data is processed for these purposes in order to be able to provide you with the functions within the framework of your user contract (Art. 6 Para. 1 lit. b GDPR).

6. Inquiries

If you send us inquiries by email or other means, your details will be saved and used to process the request.

We store inquiries about contracts or of potentially legal relevance during the general limitation period, i.e. three years from the end of the year in which we received your inquiries. We save all other inquiries for a period of 24 months. After that, your inquiries will be deleted unless we are legally obliged to keep them longer.

The storage takes place on the basis of our legitimate interest, the proper documentation of our business operations and the securing of our legal positions (Art. 6 Para. 1 lit.f GDPR). For inquiries about contracts, the data is saved for the initiation and implementation of the respective contractual relationship (Art. 6 Para. 1 lit. b GDPR) and, if applicable, for the fulfillment of legal obligations (Art. 6 Para. 1 lit. c GDPR).

7. Newsletter

If you register with us, we will inform you about news about our services on the Peerpep platform about once a month.

In this case, the collection and processing of your personal data takes place due to our legitimate interest in promoting similar services to your user account with Peerpep (Art. 6 Para. 1 lit. f GDPR, § 7 Para. 3 UWG).

You can object to this at any time – even when registering – by deactivating the corresponding checkbox or by clicking on the link to unsubscribe in the respective emails.

8. ReCaptcha

We use reCaptcha, a service from Google LLC, 1600 Amphitheater Pkwy Mountain View, California 94043, USA (“Google”), which is integrated into our website and shows the so-called Captchas – small tasks that are easy for people to solve but for machines are difficult to manage. These Captchas help us to prevent the automatic creation of user accounts and thus spam, fraud and other abuse in our community.

If you call up our registration form, reCaptcha will collect device and possibly personal data from you in order to be able to recognize whether you are a human user or a spam bot.

Further information can be found in Google’s privacy policy.
We use reCaptcha on the basis of our legitimate interest in protecting ourselves from spam, fraud against us and our users and other misuse through automatically created accounts (Art. 6 Para. 1 lit. GDPR).

9. Cookies

We save so-called “cookies” in order to be able to offer certain functions of our website and to optimize the use of our website. “Cookies” are small files that are saved on your device with the help of your internet browser.

Specifically, we use the following cookies (unless other cookies are specified elsewhere in this data protection declaration):

  • Session cookies: These cookies are required to save certain technical data during your visit to our website, e.g. to determine whether you have logged in.
  • Login cookies: These cookies are required to save your login over a session if you want to.

The legal basis for the use of these cookies is Section 15 (1) TMG and Article 6 (1) lit. b GDPR, insofar as these are necessary for the use of our website and the functions you have called up. We also use cookies based on the consent you have given.

10. Facebook Fanpage

You can also find us on Facebook at https://www.facebook.com/Peerpep.
When you visit our Facebook fan page, we process certain data about you when you interact with our page, mark a post with “Like” or comment on it, or provide other content. The data processing in this regard takes place regularly on the basis of our legitimate interest in providing the corresponding functions on our Facebook fan page, as well as on your consent to Facebook (Art. 6 Para. 1 lit. a GDPR) or your contractual relationship with Facebook (Art. 6 para. 1 lit.b GDPR). In addition, together with Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland, we are responsible for the processing of so-called Insights data when you visit our Facebook fan page.

With the help of this Insights data, Facebook analyzes the behavior on our Facebook fan page and provides us with this data in an anonymous form. For this purpose we have concluded an agreement on the shared responsibility of data processing with Facebook Ireland Ltd., here. Facebook Irleland Ltd. Among other things, undertakes to assume primary responsibility in accordance with the GDPR for the processing of Insights data and to fulfill all obligations under the GDPR with regard to the processing of Insights data. The processing serves our legitimate economic interests in the optimization and needs-based design of our Facebook fan page, Art. 6 para. 1 lit f. GDPR. We also draw your attention to the following:

If you, as a registered Facebook user, visit or like our Facebook page, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland (“Facebook”) collects personal data from you. If you are not registered on Facebook and visit the Facebook page, Facebook can collect pseudonymous usage data from you.

The following information is collected by Facebook:

  • View a page, post, or video from a page
  • Subscribe to or unsubscribe from a page
  • Mark a page or a post with “Like” or “Unlike”
  • Recommend a page in a post or comment
  • Comment , share, or respond to a page post (including the type of response)
  • Hide a page post or report it as spam
  • From another page on Facebook or from a website outside of Facebook, click on a link that leads to the page
  • Move the mouse over the name or profile picture of a page to see a preview of the page content
  • Click on the website, telephone number, “plan route” button or another button on a page
  • Click on the website, telephone number, “plan route” button or another button on a page

Information about whether you are logged in using a computer or a mobile device while visiting or interacting with a page or its content.

You can find more information in Facebook’s data protection information here.
Facebook also processes the data in the USA. There is no adequacy decision by the EU Commission for the USA. Therefore, with Facebook, we adhere to the standard data protection clauses approved by the EU Commission in accordance with Art. 46 Para. 2 lit. c GDPR.

You can find out more about how Facebook uses your data when you visit or like our Facebook page here.

11. Google Analytics

If you consent, we will use Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheater Pkwy Mountain View, California 94043, USA (“Google”). Google Analytics collects pseudonymous data from you about the use of our website, including your shortened IP address, and uses cookies. This data is transferred to a Google server in the USA and stored there. Google will use this information to evaluate your use of the website for us, to create reports on the use of our website and to generate further analyses and evaluations related to the use of our website and the internet. Google may also transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google.

There is no adequacy decision by the EU Commission for the USA. Therefore, with Google, we adhere to the standard data protection clauses approved by the EU Commission in accordance with Art. 46 Para. 2 lit. c GDPR.
Your data remains stored with Google Analytics for a period of 14 months. After this period, the data will be deleted and only aggregated statistics will be kept.

For more information about how Google uses your data, see Google’s privacy policy.

The use of Google Analytics is based on your consent (Art. 6 Para. 1 a GDPR).

You can revoke your consent at any time and deactivate Google Analytics using a browser add-on. You can download this here . Alternatively, you can withdraw your consent by clicking on “Privacy Settings ” at the bottom of the page.

11.1 Google Optimize

If you consent, along with Google Analytics we will use Google Optimize, a web analytics service provided by Google LLC, 1600 Amphitheater Pkwy Mountain View, California 94043, USA (“Google”). Google Optimize collects pseudonymous data from you about the use of our website, including your shortened IP address, and uses cookies. This data is transferred to a Google server in the USA and stored there. Google will use this information to evaluate your use of the website for us, to create reports on the use of our website and to generate further analyses and evaluations related to the use of our website and the internet. Google may also transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google.

There is no adequacy decision by the EU Commission for the USA. Therefore, with Google, we adhere to the standard data protection clauses approved by the EU Commission in accordance with Art. 46 Para. 2 lit. c GDPR.

Your data remains stored with Google Optimize for a period of 14 months. After this period, the data will be deleted and only aggregated statistics will be kept.
For more information about how Google uses your data, see Google’s privacy policy.

The use of Google Optimize is based on your consent (Art. 6 Para. 1 a GDPR).

You can withdraw your consent by clicking on “Privacy Settings ” at the bottom of the page.

12. Social plugins

If you want, you can use social plugins to share the content of our website on social networks. We have provided a two-click solution: If you want to share content via such a plugin, you must first click on an icon of the corresponding social network. This click then unlocks the plug-in of the respective social network for the future.

Only then will various data be transmitted to the respective social network. This can include:

  • Date and time of the visit to the website
  • URL of the website you are on
  • URL of the website you previously visited (“referrer”)
  • Browser used
  • Operating system used
  • Your IP address

You can withdraw your consent by clicking on “Privacy Settings ” at the bottom of the page.

If you are logged into the respective social network while visiting our site, it is not excluded that the provider assigns the visit to your account. If you use the plugin functions (e.g. clicking the “Like” button, submitting a comment), this information will also be transmitted from your browser directly to the respective social network and saved there if necessary. The purpose and scope of the data collection and the further processing and use of the data by the networks can be found in the data protection information of the respective social network.

13. NewRelic

We use NewRelic, a service of NewRelic, Inc. 188 Spear Street, Suite 1200, San Francisco, CA 94105 (“NewRelic”), which we use as a processor. This allows us to monitor the proper operation of our website, to recognize errors and to remedy them promptly. NewRelic collects your IP address and determines the approximate geographical region in which you are located, so that we can recognize if our website is not working properly in certain regions (e.g. due to network problems). After assigning the region, your IP address will be deleted by NewRelic. No other personal data will be processed. This processing is necessary to ensure the smooth operation of our contractual services (Art. 6 Para. 1 lit. b GDPR) and to safeguard our legitimate interest in the proper and safe operation of our website (Art. 6 Para. 1 lit. f GDPR).

The processing is done by NewRelic in the USA. There is no adequacy decision by the EU Commission for the USA. Therefore, with NewRelic, we adhere to the standard data protection clauses approved by the EU Commission in accordance with Art. 46 Para. 2 lit. c GDPR.

14. Survicate

We use Survicate, a service from Survicate SP. z OO, 8 Zamiany St LU 2, 02-7876 Warsaw, Poland (“Survicate”). With Survicate, we occasionally conduct surveys among our users to find out what we can do better. We do not request any personal data and participation is of course voluntary. Insofar as personal data can be transmitted to Survicate by integrating Survicate (e.g. your IP address), we have concluded an order processing agreement with Survicate and the processing is based on our legitimate interest in the smooth running of a survey via our website (Art. 6 para lit. 1 f GDPR).

15. Intercom

If you participate in our Pioneer program, we save your contact details in our CRM system, ‘Intercom’, a service of the Intercom R&D Unlimited Company, 2nd Floor, Stephen Court, 18-21 St. Stephen’s Green, Dublin 2, Ireland (“Intercom”). We use Intercom as our processor to better serve our Pioneers individually.

16. Integrated third-party content

We have also included third-party content on our website. This content is loaded from the servers of the respective providers, so that your end device transmits certain technically necessary data to the third party provider. In particular, it is not excluded that these providers can take note of the IP address assigned to you. As far as personal data is processed, this is done on the basis of the data protection declarations of the respective third party providers. The integration by us takes place on the basis of our legitimate interests, to be able to provide our users with the appropriate content and functionalities and to operate our website economically, as well as the fact that your legitimate interests do not prevail, Art. 6 para. 1 lit. f GDPR. We include the following third-party content:

Google Maps

If you want to activate the satellite or street view of Google in our maps, we integrate Google Maps, a service for users in the EU from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland or for other users is provided by Google LLC, 1600 Amphitheater Pkwy Mountain View, California 94043, USA (“Google”) for the display of maps. There is no adequacy decision by the EU Commission for the USA. Therefore, with Google, we adhere to the standard data protection clauses approved by the EU Commission in accordance with Art. 46 Para. 2 lit. c GDPR.

You can find Google’s privacy policy, click here.

Mapbox

We incorporate map tools from Mapbox, a service of Mapbox, Inc., 740 15th Street NW, 5th Floor, Washington, District of Columbia 20005 (“Mapbox”). These allow us to show you different maps. There is no adequacy decision by the EU Commission for the USA. Therefore, with MapBox, we adhere to the standard data protection clauses approved by the EU Commission in accordance with Art. 46 Para. 2 lit. c GDPR.

You can find Mapbox’s privacy policy here.

YouTube

We use YouTube videos. YouTube is a service of Google LLC, 1600 Amphitheater Pkwy Mountain View, California 94043, USA, for users from the EU of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). There is no adequacy decision by the EU Commission for the USA. Therefore, with Google, we adhere to the standard data protection clauses approved by the EU Commission in accordance with Art. 46 Para. 2 lit. c GDPR.

You can find Google’s privacy policy click here.

Vimeo

We integrate videos from Vimeo. Vimeo is a service of Vimeo Inc., Attention: Legal Department, 555 West 18th Street New York, New York 10011, USA. There is no adequacy decision by the EU Commission for the USA. Therefore, with Vimeo, we adhere to the standard data protection clauses approved by the EU Commission in accordance with Art. 46 Para. 2 lit. c GDPR.

You can find Vimeo’s privacy policy click here.

Google Fonts

We do not transmit any personal data to Google. However, for technical reasons your browser will transmit your IP address to Google.

There is no adequacy decision by the EU Commission for the USA. Therefore, with Google, we adhere to the standard data protection clauses approved by the EU Commission in accordance with Art. 46 Para. 2 lit. c GDPR. To view Google’s privacy policy, click here, for further information on data processing at Google Fonts, click here.

17. Web host

We operate our website on the servers of our web host Amazon Web Service EMEA Sarl, 38 avenue John F. Kennedy, L-1855, Luxembourg, which processes personal data on our behalf. Processing takes place only within the European Union.

18. Applications

If you apply to us, we will process your application documents and the information they contain to process your application or to decide on the establishment of an employment relationship. Your application documents will only be made available to those responsible for applying within our company. The data processing takes place on the legal basis of § 26 paragraph 1, 3 BDSG.

Should we unfortunately not be able to offer you a job, your application documents will generally be kept for up to 4 months after the end of the respective application process in order to be able to answer questions in connection with your application. Further storage can take place if this is necessary for the provision of evidence, in particular for defense, assertion or enforcement of claims (Art. 6 Para. 1 lit.f GDPR).

In addition, we only save your applicant data if you have expressly consented to it (Art. 6 Para. 1 lit. a GDPR). You can revoke your consent at any time with future effect. For example, you can use the contact details above. Revocation does not affect the processing that took place before your revocation.

19. Automated individual decisions or measures for profiling

We do not use any automated processing to make a decision or profiling.

20. Deletion of your data

Unless otherwise stated, we will delete or anonymize your personal data as soon as it is no longer required for the purposes for which we collected or used it in accordance with the preceding paragraphs. As a rule, we store your personal data for the duration of the usage or contractual relationship via the website plus a period of 30 days in which we keep backup copies after the deletion. We will also keep your data if we are obliged to do so for legal reasons or if the data is needed for criminal prosecution or to secure, assert or enforce legal claims.

If you delete your user account, your profile will be completely and permanently deleted. However, we will keep backup copies of your data for a period of 30 days before they are finally deleted, provided that this data is no longer required for legal reasons or for criminal prosecution or to secure, assert or enforce legal claims.

As far as data has to be kept for legal reasons, processing is restricted. The data will then no longer be available for further use.

Storage beyond the contractual relationship takes place on the basis of our aforementioned legitimate interests in accordance with Art. 6 Para. 1 lit. f GDPR.

21. Your rights as a data subject

21.1. Right to information

You have the right to receive information from us at any time on request about the personal data processed by us in the scope and under the conditions of Art. 15 GDPR and § 34 BDSG. To do this, you can submit an application by post or email to the above address.

21.2. Right to correct incorrect data

You have the right to request that we immediately correct your personal data if it is incorrect. For this, please contact the contact addresses given above.

21.3. Right to cancellation

You have the right, under the conditions described in Art. 17 GDPR and § 35 BDSG, to request that we delete your personal data. These requirements provide in particular a right to erasure if the personal data is no longer necessary for the purposes for which they were collected or otherwise processed, as well as in cases of unlawful processing, the existence of an objection or the obligation to erase them under EU law or the law of the Member State to which we are subject. For the period of data storage, see also section 15 of this data protection declaration. In order to assert your above right, please contact the above address.

21.4. Right to restriction of processing

You have the right to request that we restrict processing in accordance with Art. 18 GDPR. This right exists in particular if the correctness of the personal data between the user and us is controversial, for the duration that requires the correctness to be checked and in the event that the user requests a restricted processing instead of the deletion in the case of an existing right to deletion; furthermore in the event that the data is no longer required for the purposes pursued by us, but the user needs it to assert, exercise or defend legal claims and if the successful exercise of an objection between us and the user is still controversial. In order to assert your above right, please contact the above address.

21.5. Right to data portability

You have the right to receive the personal data concerning you that you have provided to us in a structured, common, machine-readable format in accordance with Art. 20 GDPR. In order to assert your above right, please contact the above address.

21.6. Right to object

You have the right to object to the processing of your personal data at any time for reasons that arise from your particular situation on the basis of Art. 6 Para. 1. Your right to objection exists for reasons arising out of your particular situation, unless we can establish compelling legitimate grounds for processing that outweigh your interests, rights and freedoms or if the processing is necessary for the assertion and exercise of or defence against legal claims (Art. 21 (1) GDPR).

21.7. Right to complain

You have the right to contact a supervisory authority of your choice in the event of complaints.

21.8. Data processing when exercising your rights

Finally, we would like to point out that we exercise the rights according to Process Art. 15 to 22 GDPR to use personal data transmitted by you for the purpose of implementing these rights and in order to be able to provide proof of this. This processing is based on the legal basis of Art. 6 Para. 1 lit. c GDPR in conjunction with Art. 15 to 22 GDPR and Section 34 ( 2) BDSG.

22. Changes to this data protection declaration

The current version of this data protection declaration is always available at https://www.peerpep.com/privacy.
Status as of June 17, 2021